]> git.ipfire.org Git - thirdparty/systemd.git/commit - man/systemd.exec.xml
core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted
authorLuca Boccassi <bluca@debian.org>
Wed, 8 Feb 2023 00:25:00 +0000 (00:25 +0000)
committerLuca Boccassi <luca.boccassi@gmail.com>
Wed, 8 Feb 2023 10:59:55 +0000 (10:59 +0000)
commit398dc7d39b9a877e71529f0e0b139329e4c6992e
treecd526003c8aa3cd96bdb9c2422bc04980c279341
parentb0fc23fae51d244d2c33d70c10003aa5d5840223
core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted

If the device access policy is restricted, add implicitly access to the TPM
if at least one encrypted credential needs to be loaded.

Fixes https://github.com/systemd/systemd/issues/26042
man/systemd.exec.xml
src/core/unit.c
test/units/testsuite-70.sh